intertecqatar.com/css/js/siasia/towersemi.com/eW9yYW1nQHRvd2Vyc2VtaS5jb20=
192.254.232.91 0 B URL intertecqatar.com/css/js/siasia/towersemi.com/eW9yYW1nQHRvd2Vyc2VtaS5jb20=
IP 192.254.232.91:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /css/js/siasia/towersemi.com/eW9yYW1nQHRvd2Vyc2VtaS5jb20= HTTP/1.1
Host: intertecqatar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 30 May 2023 13:34:24 GMT
server: nginx/1.21.6
content-type: text/html; charset=UTF-8
content-length: 0
refresh: 0;url=https://pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/index.html#yoramg@towersemi.com
x-server-cache: false
X-Firefox-Spdy: h2
pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/index.html
104.18.2.35 1.8 kB URL pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/index.html
IP 104.18.2.35:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (394)
Hash 6f3521a7f1febf9e7be6a35e24a0aa6e
0ddb094c40c59de95c88c510c8a1aee0c2ef95b3
202a024bc07d0ba72dd3cdd056c4cf0e2f8bbf2e6a2197f1ce694ff8bb83b4f1
Analyzer Verdict Alert openphish Office365
phishtank Other
GET /index.html HTTP/1.1
Host: pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 May 2023 13:34:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cf75aaaf8e21c12-OSL
Content-Encoding: gzip
pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/cdn-cgi/styles/cf.errors.css
104.18.2.35200 OK 4.5 kB URL GET HTTP/1.1 pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/cdn-cgi/styles/cf.errors.css
IP 104.18.2.35:443
Requested by https://pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/index.html#yoramg@towersemi.com
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint87:5C:76:14:05:03:7E:AD:00:B9:80:0B:3F:E7:E3:25:D8:A5:4C:03
ValidityMon, 17 Apr 2023 14:40:35 GMT - Sun, 16 Jul 2023 14:40:34 GMT
File type ASCII text, with very long lines (24131)
Hash a1cedc21f16b5a97114857154fab35e9
95e9890a15a4f7f94f7f19d2c297e4b07503c526
1103290e25ebda2712abe344a87facbac00ddaba712729be9fe5feef807bf91b
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 May 2023 13:34:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 25 May 2023 08:39:03 GMT
ETag: W/"646f1ea7-5e44"
Server: cloudflare
CF-RAY: 7cf75aac6a921c12-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 30 May 2023 15:34:22 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/cdn-cgi/images/icon-exclamation.png?1376755637
104.18.2.35200 OK 452 B URL GET HTTP/1.1 pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/cdn-cgi/images/icon-exclamation.png?1376755637
IP 104.18.2.35:443
Requested by https://pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/index.html#yoramg@towersemi.com
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint87:5C:76:14:05:03:7E:AD:00:B9:80:0B:3F:E7:E3:25:D8:A5:4C:03
ValidityMon, 17 Apr 2023 14:40:35 GMT - Sun, 16 Jul 2023 14:40:34 GMT
File type PNG image data, 54 x 54, 8-bit colormap, non-interlaced\012- data
Hash c33de66281e933259772399d10a6afe8
b9f9d500f8814381451011d4dcf59cd2d90ad94f
f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1
Host: pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/cdn-cgi/styles/cf.errors.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 May 2023 13:34:22 GMT
Content-Type: image/png
Content-Length: 452
Connection: keep-alive
Last-Modified: Thu, 25 May 2023 08:39:03 GMT
ETag: "646f1ea7-1c4"
Server: cloudflare
CF-RAY: 7cf75aacbae61c12-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 30 May 2023 15:34:22 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/favicon.ico
104.18.2.35404 Not Found 6.5 kB URL GET HTTP/1.1 pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/favicon.ico
IP 104.18.2.35:443
Requested by https://pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/index.html#yoramg@towersemi.com
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint87:5C:76:14:05:03:7E:AD:00:B9:80:0B:3F:E7:E3:25:D8:A5:4C:03
ValidityMon, 17 Apr 2023 14:40:35 GMT - Sun, 16 Jul 2023 14:40:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /favicon.ico HTTP/1.1
Host: pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 30 May 2023 13:34:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cf75aad1b3f1c12-OSL
Content-Encoding: gzip
pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/index.html
104.18.2.35200 OK 4.4 kB URL User Request GET HTTP/1.1 pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev/index.html
IP 104.18.2.35:443
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint87:5C:76:14:05:03:7E:AD:00:B9:80:0B:3F:E7:E3:25:D8:A5:4C:03
ValidityMon, 17 Apr 2023 14:40:35 GMT - Sun, 16 Jul 2023 14:40:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4643), with no line terminators
Hash 8f35e1ce63acf3481537b2a488bc5fb6
d3d580f50bcb766615585f2c0604c09d29c1eb0b
468a81e23026805e7d497534a090b4d205867a7821d9019dbfdf637bfa633025
Analyzer Verdict Alert openphish Office365
phishtank Other
GET /index.html HTTP/1.1
Host: pub-e929bc2a76bf4808ad5a9e7885452ffb.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 May 2023 13:34:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cf75aaaf8e21c12-OSL
Content-Encoding: gzip